have to assume all unconfined_type are potentially nm clients
gdm is a nm_client